Privacy Policy

Who We Are:

The controller responsible for data processing is:

Psychedelia-Stiftung
Pettenkoferstr. 12
10247 Berlin
Germany

Contact person: Sergio Pérez Rosal

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores what is known as a server log file, which includes, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data). This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our services. This serves to safeguard our legitimate interests in a correct presentation of our services in accordance with Art. 6 (1) sentence 1 lit. f GDPR. All access data is deleted no later than seven days after the end of your visit to the site.

Hosting

The services for hosting and displaying this website are partly provided by our service providers as part of processing on our behalf. Unless otherwise specified in this privacy policy, all access data as well as any data collected through forms on this website are processed on their servers. If you have any questions regarding our service providers or the legal basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.
Our service providers are located and/or use servers in the USA and other countries outside the EU and the EEA. These countries do not have an adequacy decision by the European Commission. Our cooperation with them is based on standard data protection clauses adopted by the European Commission.
Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Canada.

2. Datenverarbeitung zur Vertragsabwicklung, Kontaktaufnahme und bei Eröffnung eines Kundenkontos

We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Required fields are marked as such because we need this data to process the contract or handle your inquiry, and without it, you cannot complete the order or send the contact request. The specific data collected is shown in the respective input forms. We use the data you provide in accordance with Art. 6 (1) sentence 1 lit. b GDPR to fulfill contracts and respond to inquiries.
If you have given your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR by choosing to open a customer account, we use your data for that purpose as well. Further details on the processing of your data—particularly regarding transmission to service providers for order, payment, and shipping processing—can be found in the following sections of this privacy policy.
After the contract has been fully executed or your customer account has been deleted, your data will be restricted from further processing and deleted after the retention periods required by tax and commercial law (Art. 6 (1) sentence 1 lit. c GDPR), unless you have expressly consented to further use of your data (Art. 6 (1) sentence 1 lit. a GDPR) or we reserve the right to use your data beyond this scope as permitted by law and explained in this policy. You may delete your customer account at any time by contacting us via the contact options described in this privacy policy or by using the designated function in your customer account.

3. Cookies and Other Technologies

General Information
To make your visit to our website more attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of your browser session—i.e., when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).
We use technologies that are strictly necessary for the use of certain features of our website (e.g., the shopping cart function). These technologies collect and process your IP address, time of visit, device and browser information, as well as information about your use of our website (e.g., shopping cart contents). This processing serves our legitimate interests in providing an optimized presentation of our services in accordance with Art. 6 (1) sentence 1 lit. f GDPR.
You can find your browser’s cookie settings at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have given your consent to the use of technologies pursuant to Art. 6 (1) sentence 1 lit. a GDPR, you may withdraw your consent at any time by contacting us using the details provided in this privacy policy.

4. Social Media

Our online presence on Facebook, Instagram, and YouTube
If you have given your consent to the respective social media platform pursuant to Art. 6 (1) sentence 1 lit. a GDPR, your data will be automatically collected and stored for market research and advertising purposes when visiting our profiles on the above platforms. Usage profiles may be created from this data using pseudonyms. These profiles may be used, for example, to display advertisements that presumably match your interests, both within and outside the platforms. Cookies are generally used for this purpose.
For detailed information on how each platform processes and uses your data, including your rights and settings to protect your privacy, please refer to the privacy policies linked below. If you need help with this, you are welcome to contact us.
Facebook This service is provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information that Facebook Ireland automatically collects about your use of our online presence on Facebook is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there.
There is no adequacy decision by the European Commission for the USA.
Our cooperation is based on the European Commission’s standard contractual clauses.
The data processing in connection with your visit to a Facebook fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR.
Further information (on Page Insights data) can be found here.
Instagram This service is also provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information that Facebook Ireland automatically collects about your use of our online presence on Instagram is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there.
There is no adequacy decision by the European Commission for the USA.
Our cooperation is based on the European Commission’s standard contractual clauses.
The data processing in connection with your visit to an Instagram fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR.
Further information (on Page Insights data) can be found here.
YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information automatically collected by Google about your use of our online presence on YouTube is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with Google is based on the European Commission’s standard contractual clauses.

5. Contact Options and Your Rights

As a data subject, you have the following rights:
In accordance with Art. 15 GDPR, the right to request access to your personal data processed by us to the extent specified therein;

In accordance with Art. 16 GDPR, the right to request the prompt rectification of inaccurate or incomplete personal data stored by us;
In accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required:
◦ for exercising the right of freedom of expression and information;
◦ for compliance with a legal obligation;
for reasons of public interest; or
◦ for the establishment, exercise, or defense of legal claims;
In accordance with Art. 18 GDPR, the right to request restriction of the processing of your personal data, insofar as:
◦ you contest the accuracy of the data;
◦ the processing is unlawful, but you oppose the deletion of the data;
◦ we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
◦ you have objected to the processing pursuant to Art. 21 GDPR;
In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller;
In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your habitual place of residence or workplace, or at our company headquarters.

For any questions regarding the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, or for the withdrawal of any consent given or objection to a particular use of data, please contact us directly using the contact details provided in our legal notice.

6. Right to Object

If we process personal data as described above to protect our legitimate interests that prevail in the context of a balancing of interests, you may object to this processing with future effect.
If the data is processed for direct marketing purposes, you may object to this at any time as described above.
If the processing is carried out for other purposes, you only have the right to object on grounds relating to your particular situation.
After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In that case, we will not continue to process your personal data for such purposes.